NVD Vulnerability Detail

CVE-2016-2183

Summary	The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
Publication Date	Sept. 1, 2016, 9:59 a.m.
Registration Date	Jan. 26, 2021, 2:08 p.m.
Last Update	Nov. 21, 2024, 11:47 a.m.

CVSS3.1 : HIGH
スコア	7.5
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	なし
可用性への影響(A)	なし

CVSS2.0 : MEDIUM
Score	5.0
Vector	AV:N/AC:L/Au:N/C:P/I:N/A:N
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:::::::*
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:::::::*
cpe:2.3:a:redhat:jboss_web_server:3.0:::::::*

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:python:python::::::::	3.4.0			3.4.7
cpe:2.3:a:python:python::::::::	3.5.0			3.5.3
cpe:2.3:a:python:python::::::::	2.7.0			2.7.13

Configuration3	or higher	or less	more than	less than
cpe:2.3:a:cisco:content_security_management_appliance:9.7.0-006:::::::*
cpe:2.3:a:cisco:content_security_management_appliance:9.6.6-068:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.2e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1r:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.2h:::::::*
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.1t:::::::*
cpe:2.3:a:openssl:openssl:1.0.2c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1p:::::::*
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1q:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1o:::::::*
cpe:2.3:a:openssl:openssl:1.0.2f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.2d:::::::*

Configuration5	or higher	or less	more than	less than
cpe:2.3:a:oracle:database:12.1.0.2:::::::*
cpe:2.3:a:oracle:database:11.2.0.4:::::::*

Configuration6	or higher	or less	more than	less than
cpe:2.3:a:nodejs:node.js:::::-:::*	6.0.0			6.7.0
cpe:2.3:a:nodejs:node.js:::::-:::*	4.0.0			4.1.2
cpe:2.3:a:nodejs:node.js:::::lts:::*	4.2.0			4.6.0
cpe:2.3:a:nodejs:node.js::::::::	0.12.0			0.12.16
cpe:2.3:a:nodejs:node.js::::::::	0.10.0			0.10.47

Related information, measures and tools

No	URL	タグ
1	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	Third Party Advisory
2	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759	Third Party Advisory
3	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html	Mailing List Third Party Advisory
4	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.html	Mailing List Third Party Advisory
5	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html	Mailing List Third Party Advisory
6	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.html	Mailing List Third Party Advisory
7	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html	Mailing List Third Party Advisory
8	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.html	Mailing List Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html	Mailing List Third Party Advisory
10	http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.html	Mailing List Third Party Advisory
11	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html	Mailing List Third Party Advisory
12	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.html	Mailing List Third Party Advisory
13	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html	Mailing List Third Party Advisory
14	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.html	Mailing List Third Party Advisory
15	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html	Mailing List Third Party Advisory
16	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.html	Mailing List Third Party Advisory
17	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html	Third Party Advisory
18	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00013.html	Third Party Advisory
19	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html	Mailing List Third Party Advisory
20	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00021.html	Mailing List Third Party Advisory
21	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html	Mailing List Third Party Advisory
22	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00029.html	Mailing List Third Party Advisory
23	http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html	Mailing List Third Party Advisory
24	http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00068.html	Mailing List Third Party Advisory
25	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html	Mailing List Third Party Advisory
26	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00003.html	Mailing List Third Party Advisory
27	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html	Mailing List Third Party Advisory
28	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00023.html	Mailing List Third Party Advisory
29	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html	Mailing List Third Party Advisory
30	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00028.html	Mailing List Third Party Advisory
31	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html	Mailing List Third Party Advisory
32	http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00032.html	Mailing List Third Party Advisory
33	http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html	Mailing List Third Party Advisory
34	http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00076.html	Mailing List Third Party Advisory
35	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html	Mailing List Third Party Advisory
36	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00010.html	Mailing List Third Party Advisory
37	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html	Mailing List Third Party Advisory
38	http://lists.opensuse.org/opensuse-security-announce/2017-10/msg00011.html	Mailing List Third Party Advisory
39	http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html	Mailing List Third Party Advisory
40	http://lists.opensuse.org/opensuse-security-announce/2018-02/msg00032.html	Mailing List Third Party Advisory
41	http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html	Third Party Advisory VDB Entry
42	http://packetstormsecurity.com/files/142756/IBM-Informix-Dynamic-Server-DLL-Injection-Code-Execution.html	Third Party Advisory VDB Entry
43	http://rhn.redhat.com/errata/RHSA-2017-0336.html	Third Party Advisory
44	http://rhn.redhat.com/errata/RHSA-2017-0336.html	Third Party Advisory
45	http://rhn.redhat.com/errata/RHSA-2017-0337.html	Third Party Advisory
46	http://rhn.redhat.com/errata/RHSA-2017-0337.html	Third Party Advisory
47	http://rhn.redhat.com/errata/RHSA-2017-0338.html	Third Party Advisory
48	http://rhn.redhat.com/errata/RHSA-2017-0338.html	Third Party Advisory
49	http://rhn.redhat.com/errata/RHSA-2017-0462.html	Third Party Advisory
50	http://rhn.redhat.com/errata/RHSA-2017-0462.html	Third Party Advisory
51	http://seclists.org/fulldisclosure/2017/Jul/31	Mailing List Third Party Advisory
52	http://seclists.org/fulldisclosure/2017/Jul/31	Mailing List Third Party Advisory
53	http://seclists.org/fulldisclosure/2017/May/105	Mailing List Third Party Advisory
54	http://seclists.org/fulldisclosure/2017/May/105	Mailing List Third Party Advisory
55	http://seclists.org/fulldisclosure/2017/May/105	Mailing List Third Party Advisory
56	http://seclists.org/fulldisclosure/2017/May/105	Mailing List Third Party Advisory
57	http://www.debian.org/security/2016/dsa-3673	Third Party Advisory
58	http://www.debian.org/security/2016/dsa-3673	Third Party Advisory
59	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en	Third Party Advisory
60	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-openssl-en	Third Party Advisory
61	http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	Patch Third Party Advisory
62	http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html	Patch Third Party Advisory
63	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	Patch Third Party Advisory
64	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	Patch Third Party Advisory
65	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Patch Third Party Advisory
66	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Patch Third Party Advisory
67	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	Patch Third Party Advisory
68	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html	Patch Third Party Advisory
69	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Patch Third Party Advisory
70	http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	Patch Third Party Advisory
71	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html	Third Party Advisory
72	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html	Third Party Advisory
73	http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html	Third Party Advisory
74	http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html	Third Party Advisory
75	http://www.securityfocus.com/archive/1/539885/100/0/threaded	Third Party Advisory VDB Entry
76	http://www.securityfocus.com/archive/1/539885/100/0/threaded	Third Party Advisory VDB Entry
77	http://www.securityfocus.com/archive/1/540341/100/0/threaded	Third Party Advisory VDB Entry
78	http://www.securityfocus.com/archive/1/540341/100/0/threaded	Third Party Advisory VDB Entry
79	http://www.securityfocus.com/archive/1/541104/100/0/threaded	Third Party Advisory VDB Entry
80	http://www.securityfocus.com/archive/1/541104/100/0/threaded	Third Party Advisory VDB Entry
81	http://www.securityfocus.com/archive/1/542005/100/0/threaded	Third Party Advisory VDB Entry
82	http://www.securityfocus.com/archive/1/542005/100/0/threaded	Third Party Advisory VDB Entry
83	http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded	Third Party Advisory VDB Entry
84	http://www.securityfocus.com/archive/1/archive/1/539885/100/0/threaded	Third Party Advisory VDB Entry
85	http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded	Third Party Advisory VDB Entry
86	http://www.securityfocus.com/archive/1/archive/1/540129/100/0/threaded	Third Party Advisory VDB Entry
87	http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded	Third Party Advisory VDB Entry
88	http://www.securityfocus.com/archive/1/archive/1/540341/100/0/threaded	Third Party Advisory VDB Entry
89	http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded	Third Party Advisory VDB Entry
90	http://www.securityfocus.com/archive/1/archive/1/541104/100/0/threaded	Third Party Advisory VDB Entry
91	http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded	Third Party Advisory VDB Entry
92	http://www.securityfocus.com/archive/1/archive/1/542005/100/0/threaded	Third Party Advisory VDB Entry
93	http://www.securityfocus.com/bid/92630	Third Party Advisory VDB Entry
94	http://www.securityfocus.com/bid/92630	Third Party Advisory VDB Entry
95	http://www.securityfocus.com/bid/95568	Third Party Advisory VDB Entry
96	http://www.securityfocus.com/bid/95568	Third Party Advisory VDB Entry
97	http://www.securitytracker.com/id/1036696	Third Party Advisory VDB Entry
98	http://www.securitytracker.com/id/1036696	Third Party Advisory VDB Entry
99	http://www.splunk.com/view/SP-CAAAPSV	Third Party Advisory
100	http://www.splunk.com/view/SP-CAAAPSV	Third Party Advisory
101	http://www.splunk.com/view/SP-CAAAPUE	Third Party Advisory
102	http://www.splunk.com/view/SP-CAAAPUE	Third Party Advisory
103	http://www.ubuntu.com/usn/USN-3087-1	Third Party Advisory
104	http://www.ubuntu.com/usn/USN-3087-1	Third Party Advisory
105	http://www.ubuntu.com/usn/USN-3087-2	Third Party Advisory
106	http://www.ubuntu.com/usn/USN-3087-2	Third Party Advisory
107	http://www.ubuntu.com/usn/USN-3179-1	Third Party Advisory
108	http://www.ubuntu.com/usn/USN-3179-1	Third Party Advisory
109	http://www.ubuntu.com/usn/USN-3194-1	Third Party Advisory
110	http://www.ubuntu.com/usn/USN-3194-1	Third Party Advisory
111	http://www.ubuntu.com/usn/USN-3198-1	Third Party Advisory
112	http://www.ubuntu.com/usn/USN-3198-1	Third Party Advisory
113	http://www.ubuntu.com/usn/USN-3270-1	Third Party Advisory
114	http://www.ubuntu.com/usn/USN-3270-1	Third Party Advisory
115	http://www.ubuntu.com/usn/USN-3372-1	Third Party Advisory
116	http://www.ubuntu.com/usn/USN-3372-1	Third Party Advisory
117	http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697	Third Party Advisory
118	http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697	Third Party Advisory
119	http://www-01.ibm.com/support/docview.wss?uid=swg21991482	Third Party Advisory
120	http://www-01.ibm.com/support/docview.wss?uid=swg21991482	Third Party Advisory
121	http://www-01.ibm.com/support/docview.wss?uid=swg21995039	Third Party Advisory
122	http://www-01.ibm.com/support/docview.wss?uid=swg21995039	Third Party Advisory
123	https://access.redhat.com/articles/2548661	Mitigation Third Party Advisory
124	https://access.redhat.com/articles/2548661	Mitigation Third Party Advisory
125	https://access.redhat.com/errata/RHSA-2017:1216	Third Party Advisory
126	https://access.redhat.com/errata/RHSA-2017:1216	Third Party Advisory
127	https://access.redhat.com/errata/RHSA-2017:2708	Third Party Advisory
128	https://access.redhat.com/errata/RHSA-2017:2708	Third Party Advisory
129	https://access.redhat.com/errata/RHSA-2017:2709	Third Party Advisory
130	https://access.redhat.com/errata/RHSA-2017:2709	Third Party Advisory
131	https://access.redhat.com/errata/RHSA-2017:2710	Third Party Advisory
132	https://access.redhat.com/errata/RHSA-2017:2710	Third Party Advisory
133	https://access.redhat.com/errata/RHSA-2017:3113	Third Party Advisory
134	https://access.redhat.com/errata/RHSA-2017:3113	Third Party Advisory
135	https://access.redhat.com/errata/RHSA-2017:3114	Third Party Advisory
136	https://access.redhat.com/errata/RHSA-2017:3114	Third Party Advisory
137	https://access.redhat.com/errata/RHSA-2017:3239	Third Party Advisory
138	https://access.redhat.com/errata/RHSA-2017:3239	Third Party Advisory
139	https://access.redhat.com/errata/RHSA-2017:3240	Third Party Advisory
140	https://access.redhat.com/errata/RHSA-2017:3240	Third Party Advisory
141	https://access.redhat.com/errata/RHSA-2018:2123	Third Party Advisory
142	https://access.redhat.com/errata/RHSA-2018:2123	Third Party Advisory
143	https://access.redhat.com/errata/RHSA-2019:1245	Third Party Advisory
144	https://access.redhat.com/errata/RHSA-2019:1245	Third Party Advisory
145	https://access.redhat.com/errata/RHSA-2019:2859	Third Party Advisory
146	https://access.redhat.com/errata/RHSA-2019:2859	Third Party Advisory
147	https://access.redhat.com/errata/RHSA-2020:0451	Third Party Advisory
148	https://access.redhat.com/errata/RHSA-2020:0451	Third Party Advisory
149	https://access.redhat.com/security/cve/cve-2016-2183	Third Party Advisory
150	https://access.redhat.com/security/cve/cve-2016-2183	Third Party Advisory
151	https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/	Press/Media Coverage Technical Description Third Party Advisory
152	https://blog.cryptographyengineering.com/2016/08/24/attack-of-week-64-bit-ciphers-in-tls/	Press/Media Coverage Technical Description Third Party Advisory
153	https://bto.bluecoat.com/security-advisory/sa133	Third Party Advisory
154	https://bto.bluecoat.com/security-advisory/sa133	Third Party Advisory
155	https://bugzilla.redhat.com/show_bug.cgi?id=1369383	Issue Tracking Third Party Advisory
156	https://bugzilla.redhat.com/show_bug.cgi?id=1369383	Issue Tracking Third Party Advisory
157	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
158	https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
159	https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633	Third Party Advisory
160	https://github.com/ssllabs/ssllabs-scan/issues/387#issuecomment-242514633	Third Party Advisory
161	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448	Third Party Advisory
162	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05302448	Third Party Advisory
163	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403	Third Party Advisory
164	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369403	Third Party Advisory
165	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415	Third Party Advisory
166	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05369415	Third Party Advisory
167	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680	Third Party Advisory
168	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05385680	Third Party Advisory
169	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722	Third Party Advisory
170	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390722	Third Party Advisory
171	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849	Third Party Advisory
172	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05390849	Third Party Advisory
173	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us	Third Party Advisory
174	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03765en_us	Third Party Advisory
175	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us	Third Party Advisory
176	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us	Third Party Advisory
177	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448	Third Party Advisory
178	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448	Third Party Advisory
179	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984	Third Party Advisory
180	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984	Third Party Advisory
181	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116	Third Party Advisory
182	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05323116	Third Party Advisory
183	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499	Third Party Advisory
184	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499	Third Party Advisory
185	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	Third Party Advisory
186	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388	Third Party Advisory
187	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403	Third Party Advisory
188	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369403	Third Party Advisory
189	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415	Third Party Advisory
190	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415	Third Party Advisory
191	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	Third Party Advisory
192	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680	Third Party Advisory
193	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	Third Party Advisory
194	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722	Third Party Advisory
195	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849	Third Party Advisory
196	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390849	Third Party Advisory
197	https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	Third Party Advisory US Government Resource
198	https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	Third Party Advisory US Government Resource
199	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312	Third Party Advisory
200	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312	Third Party Advisory
201	https://kc.mcafee.com/corporate/index?page=content&id=SB10171	Third Party Advisory
202	https://kc.mcafee.com/corporate/index?page=content&id=SB10171	Third Party Advisory
203	https://kc.mcafee.com/corporate/index?page=content&id=SB10186	Third Party Advisory
204	https://kc.mcafee.com/corporate/index?page=content&id=SB10186	Third Party Advisory
205	https://kc.mcafee.com/corporate/index?page=content&id=SB10197	Third Party Advisory
206	https://kc.mcafee.com/corporate/index?page=content&id=SB10197	Third Party Advisory
207	https://kc.mcafee.com/corporate/index?page=content&id=SB10215	Third Party Advisory
208	https://kc.mcafee.com/corporate/index?page=content&id=SB10215	Third Party Advisory
209	https://kc.mcafee.com/corporate/index?page=content&id=SB10310	Third Party Advisory
210	https://kc.mcafee.com/corporate/index?page=content&id=SB10310	Third Party Advisory
211	https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/	Press/Media Coverage Technical Description Third Party Advisory
212	https://nakedsecurity.sophos.com/2016/08/25/anatomy-of-a-cryptographic-collision-the-sweet32-attack/	Press/Media Coverage Technical Description Third Party Advisory
213	https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/	Third Party Advisory
214	https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/	Third Party Advisory
215	https://seclists.org/bugtraq/2018/Nov/21	Mailing List Third Party Advisory
216	https://seclists.org/bugtraq/2018/Nov/21	Mailing List Third Party Advisory
217	https://security.gentoo.org/glsa/201612-16	Third Party Advisory
218	https://security.gentoo.org/glsa/201612-16	Third Party Advisory
219	https://security.gentoo.org/glsa/201701-65	Third Party Advisory
220	https://security.gentoo.org/glsa/201701-65	Third Party Advisory
221	https://security.gentoo.org/glsa/201707-01	Third Party Advisory
222	https://security.gentoo.org/glsa/201707-01	Third Party Advisory
223	https://security.netapp.com/advisory/ntap-20160915-0001/	Third Party Advisory
224	https://security.netapp.com/advisory/ntap-20160915-0001/	Third Party Advisory
225	https://security.netapp.com/advisory/ntap-20170119-0001/	Third Party Advisory
226	https://security.netapp.com/advisory/ntap-20170119-0001/	Third Party Advisory
227	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613	Third Party Advisory
228	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158613	Third Party Advisory
229	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178	Third Party Advisory
230	https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03286178	Third Party Advisory
231	https://support.f5.com/csp/article/K13167034	Third Party Advisory
232	https://support.f5.com/csp/article/K13167034	Third Party Advisory
233	https://sweet32.info/	Technical Description Third Party Advisory
234	https://sweet32.info/	Technical Description Third Party Advisory
235	https://wiki.opendaylight.org/view/Security_Advisories	Third Party Advisory
236	https://wiki.opendaylight.org/view/Security_Advisories	Third Party Advisory
237	https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24	Third Party Advisory
238	https://www.arista.com/en/support/advisories-notices/security-advisories/1749-security-advisory-24	Third Party Advisory
239	https://www.exploit-db.com/exploits/42091/	Third Party Advisory VDB Entry
240	https://www.exploit-db.com/exploits/42091/	Third Party Advisory VDB Entry
241	https://www.ietf.org/mail-archive/web/tls/current/msg04560.html	Mailing List Third Party Advisory
242	https://www.ietf.org/mail-archive/web/tls/current/msg04560.html	Mailing List Third Party Advisory
243	https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008	Third Party Advisory
244	https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-17-0008	Third Party Advisory
245	https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/	Press/Media Coverage Technical Description Third Party Advisory
246	https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2016/august/new-practical-attacks-on-64-bit-block-ciphers-3des-blowfish/	Press/Media Coverage Technical Description Third Party Advisory
247	https://www.openssl.org/blog/blog/2016/08/24/sweet32/	Mitigation Press/Media Coverage Third Party Advisory
248	https://www.openssl.org/blog/blog/2016/08/24/sweet32/	Mitigation Press/Media Coverage Third Party Advisory
249	https://www.oracle.com/security-alerts/cpuapr2020.html	Third Party Advisory
250	https://www.oracle.com/security-alerts/cpuapr2020.html	Third Party Advisory
251	https://www.oracle.com/security-alerts/cpujan2020.html	Third Party Advisory
252	https://www.oracle.com/security-alerts/cpujan2020.html	Third Party Advisory
253	https://www.oracle.com/security-alerts/cpujul2020.html	Third Party Advisory
254	https://www.oracle.com/security-alerts/cpujul2020.html	Third Party Advisory
255	https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
256	https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
257	https://www.oracle.com/security-alerts/cpuoct2021.html	Third Party Advisory
258	https://www.oracle.com/security-alerts/cpuoct2021.html	Third Party Advisory
259	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	Patch Third Party Advisory
260	https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	Patch Third Party Advisory
261	https://www.sigsac.org/ccs/CCS2016/accepted-papers/	Third Party Advisory
262	https://www.sigsac.org/ccs/CCS2016/accepted-papers/	Third Party Advisory
263	https://www.tenable.com/security/tns-2016-16	Third Party Advisory
264	https://www.tenable.com/security/tns-2016-16	Third Party Advisory
265	https://www.tenable.com/security/tns-2016-20	Third Party Advisory
266	https://www.tenable.com/security/tns-2016-20	Third Party Advisory
267	https://www.tenable.com/security/tns-2016-21	Third Party Advisory
268	https://www.tenable.com/security/tns-2016-21	Third Party Advisory
269	https://www.tenable.com/security/tns-2017-09	Third Party Advisory
270	https://www.tenable.com/security/tns-2017-09	Third Party Advisory
271	https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue	Third Party Advisory
272	https://www.teskalabs.com/blog/teskalabs-bulletin-160826-seacat-sweet32-issue	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-200	情報漏えい	https://cwe.mitre.org/data/definitions/200.html

JVN Vulnerability Information

TLS プロトコルなどの製品で使用される DES および Triple DES 暗号における平文のデータを取得される脆弱性

Title	TLS プロトコルなどの製品で使用される DES および Triple DES 暗号における平文のデータを取得される脆弱性
Summary	TLS、SSH、IPSec およびその他プロトコルの製品で使用される DES および Triple DES 暗号は、約 40 億ブロックの birthday bound を持っているため、平文のデータを取得される脆弱性が存在します。本脆弱性は、"Sweet32" 攻撃と呼ばれています。
Possible impacts	第三者により、長時間の暗号化されたセッションに対する誕生日攻撃を介して、平文のデータを取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 24, 2016, midnight
Registration Date	Sept. 2, 2016, 2:28 p.m.
Last Update	June 13, 2022, 2:39 p.m.

Affected System

レッドハット

JBoss Enterprise Application Platform 6

JBoss Enterprise Web Server 1

JBoss Enterprise Web Server 2

Red Hat Enterprise Linux 5

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat JBoss Web Server 3.0

シスコシステムズ

Cisco AsyncOS 9.6.6-068

Cisco AsyncOS 9.7.0-006

Cisco コンテンツセキュリティ管理アプライアンス

OpenSSL Project

OpenSSL 1.0.1

OpenSSL 1.0.2

OpenSSL 1.1.0

Python Software Foundation

Python 2.7

Python 3.3

Python 3.4

Python 3.5

Python 3.6

日本電気

CapsSuite V3.0 から V4.0

EnterpriseDirectoryServer V8.0 から V8.1

EnterpriseIdentityManager

ESMPRO/ServerAgent 4.4.22-1以降

ESMPRO/ServerAgentService 全バージョン (Linux版)

Express5800 SG3600全シリーズ

IX1000シリーズ

IX2000シリーズ

IX3000シリーズ

SecureWare/PKIアプリケーション開発キット Ver3.2

WebOTX Application Server Enterprise V8.2 から V9.4

WebOTX Application Server Express V8.2 から V9.4

WebOTX Application Server Foundation V8.2 から V8.5

WebOTX Application Server Standard V8.2 から V9.4

WebOTX Enterprise Service Bus V8.2 から V8.5

WebOTX Portal V8.2 から V9.1

日立

Cosminexus HTTP Server

Hitachi Application Server

Hitachi Application Server for Developers

Hitachi Infrastructure Analytics Advisor

Hitachi Web Server

Job Management Partner 1/IT Desktop Management 2 - Smart Device Manager

JP1/IT Desktop Management 2 - Smart Device Manager

uCosminexus Application Server

uCosminexus Application Server (64)

uCosminexus Application Server -R

uCosminexus Application Server Express

uCosminexus Application Server Standard-R

uCosminexus Application Server Enterprise

uCosminexus Application Server Smart Edition

uCosminexus Application Server Standard

uCosminexus Developer

uCosminexus Developer 01

uCosminexus Developer Professional

uCosminexus Developer Professional for Plug-in

uCosminexus Developer Light

uCosminexus Developer Standard

uCosminexus Primary Server Base

uCosminexus Primary Server Base(64)

uCosminexus Service Architect

uCosminexus Service Platform

uCosminexus Service Platform (64)

uCosminexus Service Platform - Messaging

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-2183	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2183
National Vulnerability Database (NVD)
2	CVE-2016-2183	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2183
Red Hat
3	CVE-2016-2183	https://access.redhat.com/security/cve/cve-2016-2183

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Cisco
1	Cisco Bug: CSCvb05575 - CVE-2016-2183 SMA Evaluation	https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb05575
Cisco Security Advisory
2	cisco-sa-20160927-openssl	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl
Hitachi Software Vulnerability Information
3	hitachi-sec-2017-102	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-102/index.html
4	hitachi-sec-2017-109	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-109/index.html
5	hitachi-sec-2017-119	http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-119/index.html
HPE Security Bulletin
6	HPSBGN03658	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05302448
7	HPSBGN03690	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05369415
8	HPSBGN03694	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05369403
9	HPSBHF03666	https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05323116
10	HPSBHF03674	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05349499
11	HPSBMU03660	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05309984
12	HPSBMU03668	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
13	HPSBMU03691	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
14	HPSBMU03692	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680
IBM Support Document
15	1991482	http://www-01.ibm.com/support/docview.wss?uid=swg21991482
16	1995039	http://www-01.ibm.com/support/docview.wss?uid=swg21995039
17	N1021697	http://www-01.ibm.com/support/docview.wss?uid=nas8N1021697
McAfee Security Bulletin
18	SB10171	https://kc.mcafee.com/corporate/index?page=content&id=SB10171
NEC製品セキュリティ情報
19	NV17-001	http://jpn.nec.com/security-info/secinfo/nv17-001.html
News
20	OpenSSL 1.0.1 Series Release Notes	https://www.openssl.org/news/openssl-1.0.1-notes.html
21	OpenSSL 1.0.2 Series Release Notes	https://www.openssl.org/news/openssl-1.0.2-notes.html
Node.js Foundation
22	Security updates for all active release lines, September 2016	https://nodejs.org/en/blog/vulnerability/september-2016-security-releases/
OpenSSL
23	The SWEET32 Issue, CVE-2016-2183 - OpenSSL Blog	https://www.openssl.org/blog/blog/2016/08/24/sweet32/
Oracle Critical Patch Update
24	Oracle Critical Patch Update Advisory - October 2016	http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Oracle Technology Network
25	Oracle Linux Bulletin - October 2016	http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html
26	Oracle VM Server for x86 Bulletin - October 2016	http://www.oracle.com/technetwork/topics/security/ovmbulletinoct2016-3090547.html
Python bug tracker
27	Issue27850	https://bugs.python.org/issue27850
Red Hat
28	SWEET32: Birthday attacks against TLS ciphers with 64bit block size (CVE-2016-2183)	https://access.redhat.com/articles/2548661
Red Hat Bugzilla
29	Bug 1369383	https://bugzilla.redhat.com/show_bug.cgi?id=1369383
Security Advisories
30	SA133	https://bto.bluecoat.com/security-advisory/sa133
31	SA40312	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40312
Security Bulletin
32	JSA10759	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759
Splunk
33	Splunk Enterprise 6.4.5 addresses multiple vulnerabilities	http://www.splunk.com/view/SP-CAAAPUE
34	Splunk Enterprise 6.5.1 addresses multiple OpenSSL vulnerabilities	http://www.splunk.com/view/SP-CAAAPSV
Tenable Network Security
35	TNS-2016-16	https://www.tenable.com/security/tns-2016-16
ソフトウェア製品セキュリティ情報
36	hitachi-sec-2017-102	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-102/index.html
37	hitachi-sec-2017-109	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-109/index.html
38	hitachi-sec-2017-119	http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-119/index.html

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-21-075-02	https://us-cert.cisa.gov/ics/advisories/icsa-21-075-02
2	ICSA-22-160-01	https://www.cisa.gov/uscert/ics/advisories/icsa-22-160-01
3	ICSMA-18-058-02	https://www.us-cert.gov/ics/advisories/ICSMA-18-058-02
JVN
4	JVNVU#91550327	https://jvn.jp/vu/JVNVU91550327/
5	JVNVU#95298925	https://jvn.jp/vu/JVNVU95298925/
6	JVNVU#98667810	http://jvn.jp/vu/JVNVU98667810/index.html
関連文書
7	BizMobile Go! 脆弱性対応状況	http://www.bizmobile.co.jp/news_02.php?id=4069&nc=1
8	Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN	https://sweet32.info/

Change Log

No	Changed Details	Date of change
1	[2019年07月10日] 参考情報：ICS-CERT ADVISORY (ICSMA-18-058-02) を追加	July 10, 2019, 4:44 p.m.
2	[2021年03月18日] 参考情報：JVN (JVNVU#91550327) を追加	March 18, 2021, 3:34 p.m.
3	[2021年03月29日] 参考情報：ICS-CERT ADVISORY (ICSA-21-075-02) を追加	March 29, 2021, 3:58 p.m.
4	[2022年06月08日] 参考情報：JVN (JVNVU#95298925) を追加	June 8, 2022, 1:53 p.m.
0	[2016年09月02日] 掲載 [2016年10月07日] ベンダ情報：OpenSSL Project (OpenSSL 1.0.1 Series Release Notes) を追加ベンダ情報：OpenSSL Project (OpenSSL 1.0.2 Series Release Notes) を追加ベンダ情報：シスコシステムズ (cisco-sa-20160927-openssl) を追加参考情報：JVN (JVNVU#98667810) を追加 [2016年11月10日] ベンダ情報：Node.js Foundation (Security updates for all active release lines, September 2016) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03658) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03660) を追加 [2016年11月17日] ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBHF03666) を追加ベンダ情報：オラクル (Oracle Critical Patch Update Advisory - October 2016) を追加ベンダ情報：オラクル (Oracle Linux Bulletin - October 2016) を追加ベンダ情報：オラクル (Oracle VM Server for x86 Bulletin - October 2016) を追加参考情報：関連文書 (BizMobile Go! 脆弱性対応状況) を追加 [2017年02月21日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日本電気 (NV17-001) を追加ベンダ情報：日立 (hitachi-sec-2017-102) を追加ベンダ情報：パルスセキュア (SA40312) を追加ベンダ情報：ジュニパーネットワークス (JSA10759) を追加ベンダ情報：ブルーコートシステムズ (SA133) を追加ベンダ情報：マカフィー (SB10171) を追加ベンダ情報：IBM (N1021697) を追加ベンダ情報：IBM (1991482) を追加ベンダ情報：IBM (1995039) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBHF03674) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03668) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03694) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBGN03690) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03692) を追加ベンダ情報：ヒューレット・パッカード・エンタープライズ (HPSBMU03691) を追加ベンダ情報：Tenable Network Security (TNS-2016-16) を追加ベンダ情報：Splunk (Splunk Enterprise 6.4.5 addresses multiple vulnerabilities) を追加ベンダ情報：Splunk (Splunk Enterprise 6.5.1 addresses multiple OpenSSL vulnerabilities) を追加 [2017年03月09日] 影響を受けるシステム：ベンダ情報の更新に伴い内容を更新 [2017年04月17日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (hitachi-sec-2017-109) を追加 [2017年07月19日] 影響を受けるシステム：ベンダ情報の追加に伴い内容を更新ベンダ情報：日立 (hitachi-sec-2017-119) を追加 [2017年07月25日] 影響を受けるシステム：ベンダ情報 (NV17-001) の更新に伴い内容を更新 [2017年10月03日] 影響を受けるシステム：ベンダ情報 (NV17-001) の更新に伴い内容を更新	Feb. 17, 2018, 10:37 a.m.
5	[2022年06月13日] 参考情報：ICS-CERT ADVISORY (ICSA-22-160-01) を追加	June 13, 2022, 2:37 p.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:::::::*
cpe:2.3:a:redhat:jboss_enterprise_web_server:2.0.0:::::::*
cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:::::::*
cpe:2.3:a:redhat:jboss_web_server:3.0:::::::*

Configuration4	or higher	or less	more than	less than
cpe:2.3:a:openssl:openssl:1.0.1m:::::::*
cpe:2.3:a:openssl:openssl:1.0.2a:::::::*
cpe:2.3:a:openssl:openssl:1.0.1j:::::::*
cpe:2.3:a:openssl:openssl:1.0.1h:::::::*
cpe:2.3:a:openssl:openssl:1.0.2e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1r:::::::*
cpe:2.3:a:openssl:openssl:1.0.2b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1g:::::::*
cpe:2.3:a:openssl:openssl:1.0.1a:::::::*
cpe:2.3:a:openssl:openssl:1.0.2h:::::::*
cpe:2.3:a:openssl:openssl:1.0.1d:::::::*
cpe:2.3:a:openssl:openssl:1.0.1t:::::::*
cpe:2.3:a:openssl:openssl:1.0.2c:::::::*
cpe:2.3:a:openssl:openssl:1.0.1p:::::::*
cpe:2.3:a:openssl:openssl:1.0.1k:::::::*
cpe:2.3:a:openssl:openssl:1.0.1b:::::::*
cpe:2.3:a:openssl:openssl:1.0.1n:::::::*
cpe:2.3:a:openssl:openssl:1.0.1q:::::::*
cpe:2.3:a:openssl:openssl:1.0.1e:::::::*
cpe:2.3:a:openssl:openssl:1.0.1l:::::::*
cpe:2.3:a:openssl:openssl:1.0.1f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1o:::::::*
cpe:2.3:a:openssl:openssl:1.0.2f:::::::*
cpe:2.3:a:openssl:openssl:1.0.1i:::::::*
cpe:2.3:a:openssl:openssl:1.0.2d:::::::*